Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Vulnerability in System.Text.Json 6.0.4 #849

Open
bgmulinari opened this issue Nov 27, 2024 · 1 comment
Open

Vulnerability in System.Text.Json 6.0.4 #849

bgmulinari opened this issue Nov 27, 2024 · 1 comment

Comments

@bgmulinari
Copy link

It appears that System.Text.Json has a known vulnerability that is detailed here. Flurl.Http seems to reference version 6.0.4 which is among the affected versions.

This can result in the following message while compiling in projects that use Flurl.Http directly or indirectly:

Error NU1903 : Warning As Error: Package 'System.Text.Json' 6.0.4 has a known high severity vulnerability, https://github.com/advisories/GHSA-8g4q-xg66-9fp4

Is this on the radar to be addressed soon? For now I can directly reference version 6.0.11 in my project, but I'm not sure about impacts.

@tmenier
Copy link
Owner

tmenier commented Nov 27, 2024

Thanks. Yes I'll get this fixed for the next release. In the mean time, it should be perfectly fine to upgrade STJ yourself. In the unlikely event that you encounter some issue with it, please report back.

@tmenier tmenier moved this from Backlog to Planned in Default Project Nov 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Planned
Development

No branches or pull requests

2 participants